Planner spam from Amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Sep 2022 14:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ocBs2-0004nt-9B
for dave@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 14:35:30 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Sep 2022 14:35:30 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a11-48.smtp-out.amazonses.com ([54.240.11.48]:48287)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from <0100018370ca5c04-ae7d0f23-fb45-4937-a0cd-42b7bf21717c-000000@amazonses.com>)
id 1ocA2H-000Lbp-3O
for doctor@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 12:38:00 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; d=amazonses.com; t=1664044653;
h=Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Feedback-ID;
bh=WmAA7ULg4Z/4sSH6lJ80YAf9hbzlzoDnBKe152EW3mA=;
b=kL+EF+MX5sb4HMIgWhPo+jol1zTk6VfD2whbJwsSOk1waaxZTtBRjEPYb/jlnp48
7fyD0cTI9eGtBUhnRBP9b8C/zvTuPcCTGn5NbMynXlm/qRNVCiEmwS3Qaj8ycMphCJ7
yTrdb5nfcdBt8rWB2AtNP/oXq+btMDlSG71xADRk=
Date: Sat, 24 Sep 2022 18:37:33 +0000
To: doctor@doctor.nl2k.ab.ca
From: "PartyFixx.co/Live"
Reply-To: "PartyFixx.co/Live"
Subject: Hey, what are your plans for this weekend?
Message-ID: <0100018370ca5c04-ae7d0f23-fb45-4937-a0cd-42b7bf21717c-000000@email.amazonses.com>
X-Mailer: Sendy (https://sendy.co)
List-Unsubscribe:
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Feedback-ID: 1.us-east-1.uplJk2fW3RpWRnQtKpce+OBV+1Fwia5DmSjUVylqacU=:AmazonSES
X-SES-Outgoing: 2022.09.24-54.240.11.48
X-Spam_score: 8.7
X-Spam_score_int: 87
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I created PartyFixx.co/Live an online guide with over
100,000 local events. You're able to sort and browse events by date, location,
and genre. So we would love for you to check out our site whenever you're
traveling or just looking for some local fun.
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: partyfixx.co]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[54.240.11.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised
website + HTML only
Subject: {SPAM?} Hey, what are your plans for this weekend?
Unsubscribe Here
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Sep 2022 14:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ocBs2-0004nt-9B
for dave@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 14:35:30 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Sep 2022 14:35:30 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a11-48.smtp-out.amazonses.com ([54.240.11.48]:48287)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from <0100018370ca5c04-ae7d0f23-fb45-4937-a0cd-42b7bf21717c-000000@amazonses.com>)
id 1ocA2H-000Lbp-3O
for doctor@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 12:38:00 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; d=amazonses.com; t=1664044653;
h=Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Feedback-ID;
bh=WmAA7ULg4Z/4sSH6lJ80YAf9hbzlzoDnBKe152EW3mA=;
b=kL+EF+MX5sb4HMIgWhPo+jol1zTk6VfD2whbJwsSOk1waaxZTtBRjEPYb/jlnp48
7fyD0cTI9eGtBUhnRBP9b8C/zvTuPcCTGn5NbMynXlm/qRNVCiEmwS3Qaj8ycMphCJ7
yTrdb5nfcdBt8rWB2AtNP/oXq+btMDlSG71xADRk=
Date: Sat, 24 Sep 2022 18:37:33 +0000
To: doctor@doctor.nl2k.ab.ca
From: "PartyFixx.co/Live"
Reply-To: "PartyFixx.co/Live"
Subject: Hey, what are your plans for this weekend?
Message-ID: <0100018370ca5c04-ae7d0f23-fb45-4937-a0cd-42b7bf21717c-000000@email.amazonses.com>
X-Mailer: Sendy (https://sendy.co)
List-Unsubscribe:
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Feedback-ID: 1.us-east-1.uplJk2fW3RpWRnQtKpce+OBV+1Fwia5DmSjUVylqacU=:AmazonSES
X-SES-Outgoing: 2022.09.24-54.240.11.48
X-Spam_score: 8.7
X-Spam_score_int: 87
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I created PartyFixx.co/Live an online guide with over
100,000 local events. You're able to sort and browse events by date, location,
and genre. So we would love for you to check out our site whenever you're
traveling or just looking for some local fun.
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: partyfixx.co]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[54.240.11.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised
website + HTML only
Subject: {SPAM?} Hey, what are your plans for this weekend?
Hello,
I created PartyFixx.co/Live an online guide with over 100,000 local events. You're able to sort and browse events by date, location, and genre.
So we would love for you to check out our site whenever you're traveling or just looking for some local fun.
This Email Was Intended For: doctor@doctor.nl2k.ab.ca
Unsubscribe Here
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments